github/umami
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Fix teamWebsite / teamUser.

Browse Source
This commit is contained in:
Brian Cao
2023-04-09 16:04:28 -07:00
parent 53b23420a4
commit 9eff565e7a
14 changed files with 83 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
lib/auth.ts
View File

@@ -205,13 +205,13 @@ export async function canDeleteTeamUser({ user }: Auth, teamId: string, removeUs
return false;
}
export async function canDeleteTeamWebsite({ user }: Auth, teamWebsiteId: string) {
export async function canDeleteTeamWebsite({ user }: Auth, teamId: string, websiteId: string) {
if (user.isAdmin) {
return true;
}
if (validate(teamWebsiteId)) {
const teamWebsite = await getTeamWebsite(teamWebsiteId);
if (validate(teamId) && validate(websiteId)) {
const teamWebsite = await getTeamWebsite(teamId, websiteId);
if (teamWebsite.website.userId === user.id) {
return true;
@@ -219,7 +219,7 @@ export async function canDeleteTeamWebsite({ user }: Auth, teamWebsiteId: string
const teamUser = await getTeamUser(teamWebsite.teamId, user.id);
return hasPermission(teamUser.role, PERMISSIONS.teamDelete);
return hasPermission(teamUser.role, PERMISSIONS.teamUpdate);
}
return false;